security/vuxml: Add entry for multiple rubygems vulnerabilities reported 2017-08-29 at https://www.ruby-lang.org/en/news/2017/08/29/multiple-vulnerabilities-in-rubygems/ Approved by: swills5635e607cd
Port details
security/vuxml 1.1_6
Vulnerability and eXposure Markup Language DTD
Port info
- Maintainer
- ports-secteam@FreeBSD.org
- Packages
- latest: 1.1_6
- Upstream
- up to date
- Last update
- to 1.1_6 · 898db4939a
- Quarterly
- 2026Q4: 1.1_6
- WWW
- https://vuxml.freebsd.org/
- CPE
- not set in the port, and none could be determined — that does not mean none exists
- Links
- cgit · VuXML · Report wrong data
Install
- Package
# pkg install vuxmlinstalls 1.1_6 fromlatest; fromquarterly(2026Q4) 1.1_6- Port
# cd /usr/ports/security/vuxml && make install clean- Size
- 9.7 KiB download · 40 KiB installed
- License
- BSD2CLAUSE
Packages by version and architecture
latest
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 16 | 1.1_6 | 1.1_6 | – |
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
quarterly (2026Q4)
| FreeBSD version | amd64 | aarch64 | i386 |
|---|---|---|---|
| FreeBSD 15 | 1.1_6 | 1.1_6 | – |
| FreeBSD 14 | 1.1_6 | 1.1_6 | 1.1_6 |
version as in the ports tree (latest) or the most common one (quarterly) · different version · ✗ not built · – no packages for this platform. Package sets that have not been rebuilt for 60 days are left out.
Dependencies
Depends on 5
- lang/python312 3.12.15 25 unaddressed
- textproc/libxslt 1.1.45
- textproc/xhtml-basic 1.0.20001219_2
- textproc/xhtml-modularization 1.0.20010410_1
- textproc/xmlcatmgr 2.2_4
Run and library dependencies of the package on latest. Build dependencies are not in the package index.
Required by 0
No package on latest depends on it.
Packages on latest that depend on it directly.
Unaddressed and VuXML only (0)
No unaddressed CVE and nothing reported by
pkg audit for the packaged version 1.1_6.Fixed (0)
No VuXML entries for this package.
Problem reports (5) · open in Bugzilla, most recently changed first
| PR | Summary | Status | Changed |
|---|---|---|---|
| 295797 | maintainer-feedback? security/vuxml: fix nginx ranges vulnerable to CVE-2026-9256 | In Progress | 2026-07-17 |
| 295836 | maintainer-feedback? security/vuxml: Multiple vulnerabilities in py-django | New | 2026-06-04 |
| 291717 | security/vuxml: add entry for uriparser < 1.0.0 | New | 2025-12-16 |
| 288090 | maintainer-feedback? security/vuxml: make validate warnings after update to new libxml2 | New | 2025-07-08 |
| 270795 | security maintainer-feedback? security/vuxml: taking port flavours into account in recent new entries | In Progress | 2025-07-01 |
Commits (8,355)
Document vulnerabilities of www/kanboard PR: 221826c77ee4be3b
Document issues in poppler PR: 220608b944d1409e
Document vulnerabilities of mail/phpmailera8450842ce
Document salt security vulnerability Obtained from: https://docs.saltstack.com/en/latest/topics/releases/2017.7.1.html1e913e1556
Document dnsdist vulnerabilities Obtained from: https://dnsdist.org/security-advisories/index.html3df74f6ca8
Document security vulnerability in evince and atril PR: 220713 Submitted by: Vladimir Krstulja <vlad-fbsd@acheronmedia.com>d5b0073e2b
Document SquirrelMail vulnerability69eb65ecdc
Document vulnerabilities in math/pspp < 1.0.0 Obtained from: https://www.cvedetails.com/vulnerability-list/vendor_id-72/product_id-38732/year-2017/GNU-Pspp.html531bedea7c
Update the latest libsoup entry with the fixed version.5db56a5dd6
- Add entry about drupal8 vulnerabilities4342c1ea79
security/vuxml: Document devel/libsoup vulnerabilitya38bc3f5e1
security/vuxml: Document Zabbix vulnerability Security: CVE-2017-282413ccbd2758
security/vuxml: Document vulnerability in sysutils/py-supervisor PR: 221539 Submitted by: Franz Glasner <f.glasner@feldmann-mg.com> Security: CVE-2017-116106e1619937a
Fix typo in affected versions of GitLab vulnerabilities7f81268bf2
Document freeradius vulnerabilitiesfb59b281a3
Document Mercurial vulnerability96f0be5bd7
security/vuxml: Update recent MySQL entry - Changelog reveals MariaDB 10.0.31 and 10.1.25 vulnerable98982a4ece
Match both dovecot and dovecot2. Submitted by: mat5a5afef50e
Chase dovecot2's rename to dovecot. Reported by: remko0fd782b4e9
Add CVE-2017-9800 for subversion ports. Security: http://subversion.apache.org/security/CVE-2017-9800-advisory.txt7c6bfc574a
Document GitLab vulnerabilities Security: CVE-2017-12426 Security: https://vuxml.FreeBSD.org/freebsd/abcc5ad3-7e6a-11e7-93f7-d43d7e971a1b.htmlfb8432d996
security/vuxml: Consolidate duplicate Apache Commons FileUpload entries This also remove a wrong entry that marks tomcat 6 as vulnerable Approved by: ports-secteam (zi) Differential Revision: https://reviews.freebsd.org/D11941175a447a4b
Add CVE:s fixed in latest PostgreSQL release8671deaff2
Document latest Flash Player vulnerabilities. https://helpx.adobe.com/security/products/flash-player/apsb17-23.htmlf70d79eb9f
security/vuxml: Document today's cURL vulnerabilities64dbc59ffa
security/vuxml: Document axis2 vulnerability Security: CVE-2016-1000031fe2d9afcd0
security/vuxml: mark firefox < 55 as vulnerablec6b0a0d887
Update sqlite3 vuxml entry The lower bound was incorrect. It has existed much longer than 3.17.0.1c8feb1a3f
Document sqlite3 vulnerability Security: CVE-2017-109892156625d0d
Fix Strongswan entries PR: 220874c97d0bfb71
Document varnish vulnerability Security: https://varnish-cache.org/security/VSV00001.htmla5e1001882
Document new vulnerabilities in www/chromium < 60.0.3112.78 Obtained from: https://chromereleases.googleblog.com/2017/07/stable-channel-update-for-desktop.html01be461a46
security/vuxml: Document vulnerability in cacti v1.1.13 Security: CVE-2017-116918f2967d18e
security/vuxml: fix indent in last entry165c80f0bd
security/vuxml: Add proftpd chroot secape vulnerability Security: CVE-2017-74182438cfbd2b
security/vuxml: Add jabberd vulnerability PR: 221014 Security: CVE-2017-10807da37bb5bd7
Document webkit2-gtk3 CVE's92ebf45094
Document gsoap vulnerability39b76e83e8
security/vuxml: Add Percona to recent MySQL vulns Security: cda2f3c2-6c8b-11e7-867f-b499baebfeaff73956faab
security/vuxml: Correct MySQL versions Security: cda2f3c2-6c8b-11e7-867f-b499baebfeafc41681d32d
Fix collectd5's range version Reported by: romain9249dcaafe
Document GitLab vulnerabilities6066f3c6ff
security/vuxml: Document MySQL vulnerabilities0a52a597bb
Fix vuxmlbuild by replacing lower case by upper case in cvename Reported by: bz8e5d91da69
Document vulnerability in collectd5 PR: 220797 Reported by: luca.pizzamiglio@gmail.com Security: CVE-2017-740197fd17403f
Document vulnerability in strongswan PR: 220823 Reported by: i.dani@outlook.com Security: CVE-2017-9022 Security: CVE-2017-902389b09b0338
security/vuxml: Document vulnerability in cacti Security: CVE-2017-10970 Approved by: garga (mentor) Differential Revision: https://reviews.freebsd.org/D11611af1b362a81
security/vuxml: Document vulnerability in apache24f25484c5d3
Document latest Flash Player vulnerabilities. https://helpx.adobe.com/security/products/flash-player/apsb17-21.html6af681d268